{"id":"CVE-2025-40299","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ngve: Implement gettimex64 with -EOPNOTSUPP\n\ngve implemented a ptp_clock for sole use of do_aux_work at this time.\nptp_clock_gettime() and ptp_sys_offset() assume every …","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ngve: Implement gettimex64 with -EOPNOTSUPP\n\ngve implemented a ptp_clock for sole use of do_aux_work at this time.\nptp_clock_gettime() and ptp_sys_offset() assume every …","severity":"none","published":"2025-12-08","updated":"2026-10-14","sourceUpdated":"2026-10-14T22:10:00.210","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-40299","references":[{"url":"https://git.kernel.org/stable/c/6ab753b5d8e521616cd9bd10b09891cbeb7e0235","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/96ec90412ceb58c73fd3714e40ab2cee1eedac3b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd"],"epss":0.00185,"epssPercentile":0.07515,"ingestedAt":"2026-10-14T23:00:02.017Z","slug":"CVE-2025-40299","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ngve: Implement gettimex64 with -EOPNOTSUPP\n\ngve implemented a ptp_clock for sole use of do_aux_work at this time.\nptp_clock_gettime() and ptp_sys_offset() assume every ptp_clock has\nimplemented either gettimex64 or gettime64. Stub gettimex64 and return\n-EOPNOTSUPP to prevent NULL dereferencing.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}